Static task
static1
Behavioral task
behavioral1
Sample
dfff1c97b184f846a9bb9e740847e37c18fd7220d9e893b79f0119c626b07a2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfff1c97b184f846a9bb9e740847e37c18fd7220d9e893b79f0119c626b07a2a.exe
Resource
win10v2004-20220901-en
General
-
Target
dfff1c97b184f846a9bb9e740847e37c18fd7220d9e893b79f0119c626b07a2a
-
Size
28KB
-
MD5
77c44065f51a0e6b4d011ca75e9dc662
-
SHA1
b64471896a232901487c10ad52cec8b3bd183ea5
-
SHA256
dfff1c97b184f846a9bb9e740847e37c18fd7220d9e893b79f0119c626b07a2a
-
SHA512
e97b1be1aa8048fe39fe0e277fbec433a234b8631d88d71af3962dc1f64098ecfff44ae9064472e1a9ab699c593aa09b1a578a617f82ce55b2abca9177eb853c
-
SSDEEP
384:1BW3BqUxYv5v61gPaSfgaOnPkgVBo0rd5zDjFL84BD:1BWrxOPaSfgvnMgzrdF18
Malware Config
Signatures
Files
-
dfff1c97b184f846a9bb9e740847e37c18fd7220d9e893b79f0119c626b07a2a.exe windows x86
0677263bcf079777becddaaf0c017104
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CompareStringA
AttachConsole
CompareStringW
ContinueDebugEvent
ConvertDefaultLocale
CreateJobObjectW
ReadConsoleOutputW
IsDebuggerPresent
Beep
_lopen
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
MulDiv
BackupWrite
GetTickCount
RtlMoveMemory
SetComputerNameA
QueryDosDeviceA
CreateJobObjectW
ReadConsoleOutputW
RegisterWowExec
Beep
GetProfileIntW
TerminateProcess
TerminateProcess
GetSystemDirectoryA
rasapi32
RasEnumEntriesA
DDMGetPhonebookInfo
DwCloneEntry
RasAutoDialSharedConnection
RasAutodialAddressToNetwork
RasAutodialEntryToNetwork
RasClearConnectionStatistics
RasClearLinkStatistics
RasConnectionNotificationA
RasConnectionNotificationW
RasCreatePhonebookEntryA
RasCreatePhonebookEntryW
RasDeleteEntryA
RasDeleteEntryW
RasDeleteSubEntryA
RasDeleteSubEntryW
RasDialA
RasDialW
RasEditPhonebookEntryA
RasEditPhonebookEntryW
RasEnumAutodialAddressesA
RasEnumAutodialAddressesW
RasEnumConnectionsA
RasEnumConnectionsW
RasEnumDevicesA
RasEnumDevicesW
RasEnumEntriesA
RasEnumEntriesW
RasFreeEapUserIdentityA
RasFreeEapUserIdentityW
RasGetAutodialAddressA
RasGetAutodialAddressW
RasGetAutodialEnableA
RasGetAutodialEnableW
RasGetAutodialParamA
RasGetAutodialParamW
RasGetConnectStatusA
RasGetConnectStatusW
RasGetConnectionStatistics
RasGetCountryInfoA
RasGetCountryInfoW
RasGetCredentialsA
RasGetCredentialsW
RasGetCustomAuthDataA
RasGetCustomAuthDataW
RasGetEapUserDataA
RasGetEapUserDataW
RasGetEapUserIdentityA
RasGetEapUserIdentityW
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasGetEntryPropertiesW
RasGetErrorStringA
RasGetErrorStringW
RasGetHport
RasGetLinkStatistics
RasGetNapStatus
RasGetProjectionInfoA
RasGetProjectionInfoW
RasGetSubEntryHandleA
RasGetSubEntryHandleW
RasGetSubEntryPropertiesA
RasGetSubEntryPropertiesW
RasHangUpA
RasHangUpW
RasInvokeEapUI
RasQueryRedialOnLinkFailure
RasQuerySharedAutoDial
RasQuerySharedConnection
RasRenameEntryA
RasRenameEntryW
RasScriptTerm
RasSetAutodialAddressA
RasSetAutodialAddressW
RasSetAutodialEnableA
RasSetAutodialEnableW
RasSetAutodialParamA
RasSetAutodialParamW
RasSetCredentialsA
RasSetCredentialsW
RasSetCustomAuthDataA
RasSetCustomAuthDataW
RasSetEapUserDataA
RasSetEapUserDataW
RasSetEntryDialParamsA
RasSetEntryDialParamsW
RasSetEntryPropertiesA
RasSetEntryPropertiesW
RasSetOldPassword
RasSetSharedAutoDial
RasSetSubEntryPropertiesA
RasSetSubEntryPropertiesW
RasValidateEntryNameA
RasValidateEntryNameW
RasEnumEntriesA
RasEnumEntriesA
opengl32
GlmfBeginGlsBlock
GlmfBeginGlsBlock
odbctrac
TraceSQLAllocEnv
dsauth
DhcpDsAddServer
credui
CredUIInitControls
cryptui
CryptUIDlgSelectCA
CryptUIDlgSelectCA
cfgmgr32
CM_Delete_Range
msvcrt
fopen
fread
pdh
PdhEnumObjectsA
dnsapi
DnsQueryExA
DnsNameCopy
DnsCopyStringEx
DnsApiFree
DnsApiAlloc
Sections
text Size: 1024B - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DAT Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE